Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/284afcec-5808-39d6-a11a-b07cf96da2e1.roa
File:                     284afcec-5808-39d6-a11a-b07cf96da2e1.roa (raw, json)
Hash identifier:          DkkNcsL0di8lIPcvldFjADTk01M6FGuNdZtt1o6L7zg=
Subject key identifier:   64:B2:02:37:2A:DA:75:45:31:05:9D:C0:ED:19:A5:7F:75:0E:71:41
Certificate issuer:       /CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Certificate serial:       010D0C9F432858488815E7B3A3C3E43962DC7600
Authority key identifier: 39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/284afcec-5808-39d6-a11a-b07cf96da2e1.roa
Signing time:             Mon 13 Jan 2025 14:00:52 +0000
ROA not before:           Mon 13 Jan 2025 14:00:52 +0000
ROA not after:            Sun 13 Apr 2025 13:00:52 +0000
asID:                     32133
IP address blocks:        64.98.112.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:88:15:e7:b3:a3:c3:e4:39:62:dc:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
        Validity
            Not Before: Jan 13 14:00:52 2025 GMT
            Not After : Apr 13 13:00:52 2025 GMT
        Subject: CN=165babe8-96d3-42fd-8005-4ee41b82d166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8b:03:10:a9:c7:91:77:df:0d:a3:e9:3f:4c:
                    e6:0c:f8:6c:97:34:c0:8e:8f:fb:3f:26:20:28:1e:
                    fe:b3:15:6b:f5:fb:71:5e:c6:25:2a:58:eb:46:f3:
                    60:31:a8:ad:a8:1a:a6:5b:67:f2:d2:2b:63:f3:af:
                    1e:07:95:11:10:36:7a:41:37:e5:59:12:7d:00:e3:
                    cf:60:33:88:c6:8b:2a:0e:37:48:bb:38:08:cf:16:
                    21:17:bf:b1:26:5e:48:92:ac:a6:31:81:7f:0c:8c:
                    90:a1:4a:98:26:68:07:60:74:97:39:b4:85:3e:e2:
                    d5:02:48:a0:ab:11:a2:5c:46:37:1d:af:0f:94:31:
                    e3:bd:ad:6b:dc:ed:e4:7b:72:35:78:9c:52:1c:66:
                    a4:3c:6d:34:24:24:a3:84:ab:f7:39:2c:40:0a:2f:
                    72:3b:42:68:b8:af:29:a4:d4:cc:7b:4f:7b:fd:25:
                    43:25:e0:af:80:4a:6e:86:4c:77:a3:9c:d9:b5:00:
                    ec:b2:bb:49:a2:0f:eb:f2:66:63:2d:56:54:6f:8d:
                    24:38:8d:34:3d:33:19:8f:02:7d:94:6d:d9:9e:47:
                    c9:94:83:2a:b8:79:1c:8a:d5:bd:c1:5c:b8:c6:3c:
                    b9:91:8b:e0:06:78:48:1f:fb:a2:5e:21:e2:7c:47:
                    ac:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:B2:02:37:2A:DA:75:45:31:05:9D:C0:ED:19:A5:7F:75:0E:71:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/284afcec-5808-39d6-a11a-b07cf96da2e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl

            X509v3 Authority Key Identifier:
                keyid:39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.98.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:52:45:53:c2:4d:ac:f9:fb:f8:10:6c:f6:9d:7b:ed:e0:ab:
         a9:a4:0c:02:38:5c:e2:85:4d:9d:ca:29:96:d5:c4:9a:85:21:
         58:33:8c:15:f6:09:c4:59:06:d3:53:b3:80:47:9c:07:3b:f9:
         a2:9d:a7:3f:be:83:1d:06:b2:bb:25:88:8f:8e:78:e2:a9:4c:
         08:3b:0e:f0:9c:82:6c:00:c6:c0:c4:b4:5f:24:9f:f1:1d:90:
         e7:cc:6b:96:69:4a:5e:a8:60:ff:f8:39:2f:d2:f9:04:af:08:
         82:52:9f:9a:7e:d8:0d:56:b4:71:cb:20:4d:b7:c8:70:fa:ed:
         aa:74:c0:6a:8c:4c:be:e1:58:30:12:a7:56:0c:82:34:5a:9a:
         ab:82:34:30:d2:64:02:0c:e0:6b:f5:d4:36:7b:1f:2b:5b:9d:
         a8:c1:9a:c0:d5:aa:9b:31:e8:b4:c2:b6:6f:0b:27:4b:03:11:
         b2:84:31:1c:d8:a6:3f:21:6a:c3:ca:37:f3:29:b3:f3:a8:18:
         3b:ad:80:55:8f:c2:2c:10:be:c9:10:9a:72:44:b3:ca:85:f6:
         87:54:9d:87:d0:e5:88:58:6b:48:6e:3c:8b:f4:0b:76:e1:1b:
         cc:c7:51:73:19:29:c6:a5:f0:c4:95:85:65:21:92:b1:a4:22:
         70:29:80:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:40:47 2025 by rpki-client